scp with sshpass Post: 302856293

Sponsored Content

Top Forums Shell Programming and Scripting scp with sshpass Post 302856293 by Corona688 on Monday 23rd of September 2013 02:45:40 PM

09-23-2013

Registered User

Quote:

Originally Posted by mathbalaji

Oh! I didn't know about that! So, if my script runs for say 1 minute, will the password be visible for that one minute in

Code:

ps aux

or for the entire session?

Try it and see?

It's possible that sshpass makes some effort to conceal the password once its passed. It could exec() again with different parameters and blank it. But even so, there'd be an unavoidable eyeblink when the password was exposed. Anyone could extract the password with obsessive logging.

These weaknesses are well-known, so sshpass has many safer options fortunately. sshpass can read a file, according to its manpage, so you could do this:

Code:

OLDMASK=$(umask)
umask 077 # Force rw------- permissions on /tmp/$$
exec 5>/tmp/$$ #Create temp file /tmp/$$ and write with FD 5
exec 6</tmp/$$ # Read from temp file /tmp/$$ with FD 6
rm /tmp/$$ # DELETE tempfile /tmp/$$ so nothing else can get it
umask $OLDMASK # Restore umask

cat <<EOF >&5 # Finish writing to /tmp/$$
$PASSWORD
EOF

exec 5>&- # Close FD 5

sshpass -d6 ...

exec 6<&- # Close FD 6

Which should protect the password much better. The temp file won't even be listed in /tmp/ while sshpass is running.

Last edited by Corona688; 09-23-2013 at 03:54 PM..

This User Gave Thanks to Corona688 For This Post:

Corona688

View Public Profile for Corona688

Visit Corona688's homepage!

Find all posts by Corona688

7 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Scp

I am trying to transfer a 10g files using scp, but I am getting timeout errors is there anywhere that I can modify a config file or something to increase the time.

2. UNIX for Advanced & Expert Users

help with scp

hi all in my script i was using the "scp" command to copy 2 files from a certain directory on server A to the same directory on another server B, but for some reason its only copying the first file in the directory. This is the frst time that i used the scp command,any ideas appreciated. thnks

3. Shell Programming and Scripting

problem with sshpass

Hello i am using sshpass to pass remote password into script but phase some problems when try to execute some commands remotely which means that the remote env not passed through sshpass for example sshpass -p 'XXX' ssh -o StrictHostKeyChecking=no -l myserver myserver visu_fis_pnes ...

4. Solaris

How to install SSHPASS on Solaris ???

Could you please let me know the steps: how to install sshpass command tool in solaris any version greater than 8.

5. Shell Programming and Scripting

Cannot sshpass router

Hi, I am trying to use sshpass to login to my router and then execute a reboot command. But the command never executes, can someone please help me. This doesnt work.... sshpass -p 'password' ssh 192.168.1.1 -l root -o StrictHostKeyChecking=no "sys reboot" However if I try following then it...

6. Shell Programming and Scripting

Put a command into router through sshpass bash script

hello, i am facing some issue. I am using a simple bash script that via sshpass put a command into router. Now, problem is that i have a file and commands into it. sshpass -p $pass ssh -o $log -n $user@$h /ip address set address=10.0.0.1/24 so if I have that command ip address set ...

7. UNIX for Advanced & Expert Users

How to pass password as a variable for sshpass authentication?

Using below below command i'm able to connect or authenticate server, In below command password contains special characters sshpass -v -p 'ASJBA%hs76)#' ssh -q -o ConnectTimeout=5 hostname But If I pass password as a variable I'm not able to connect or authenticate server, can you please help...

LEARN ABOUT OPENSOLARIS

kpasswd

kpasswd(1)							   User Commands							kpasswd(1)

NAME

       kpasswd - change a user's Kerberos password

SYNOPSIS

       /usr/bin/kpasswd [principal]

DESCRIPTION

       The  kpasswd command is used to change a Kerberos principal's password. kpasswd prompts for the current Kerberos password, which is used to
       obtain a changepw ticket from the KDC for the user's Kerberos realm. If kpasswd successfully obtains  the  changepw  ticket,  the  user	is
       prompted twice for the new password, and the password is changed.

       If the principal is governed by a policy that specifies the length and/or number of character classes required in the new password, the new
       password must conform to the policy. (The five character classes are lower case, upper case, numbers, punctuation, and  all  other  charac-
       ters.)

OPERANDS

       The following operand is supported:

       principal    Change  the  password  for the Kerberos principal principal. Otherwise, the principal is derived from the identity of the user
		    invoking the kpasswd command.

FILES

       /tmp/ovsec_adm.xxxxxx	Temporary credentials cache for the lifetime of the password changing operation. (xxxxxx is a random string.)

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWkrbu			   |
       +-----------------------------+-----------------------------+
       |CSI			     |Enabled			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       kerberos(5)

BUGS

       If kpasswd is suspended, the changepw tickets may not be destroyed.

SunOS 5.11							    30 Jul 2001 							kpasswd(1)

7 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Scp

Discussion started by: rbizzell